Brightmail

» see brightmail.com as it lived, on the wayback machine

~ the obit ~

Two million email addresses existed for no reason except to receive spam. Nobody read them and nobody replied to them. They were seeded around the internet in places where address harvesters would find them, and everything that arrived in them was, by definition, unsolicited. Brightmail called this the probe network, and it was the entire idea of the company.

Sunil Paul left AOL and started Bright Light Technologies in 1998 with the stated promise of ending spam. It raised $55 million across three rounds and renamed itself Brightmail in the summer of 1999. The insight was to treat spam the way the antivirus industry treated malware. Do not ask each recipient to make a judgment call. Detect the campaign centrally at the moment it starts, then ship a rule for it to everybody within minutes.

That gave the company an operations room, staffed continuously, called the Brightmail Logistics and Operations Center. Spam hit the probe mailboxes, analysts and automation turned it into rules, and the rules went out to a filtering engine sitting in front of the mail servers of internet providers. The customer list was the infrastructure layer rather than the consumer one: Hotmail, EarthLink, AT&T WorldNet, Excite, Juno. By 2004 roughly three hundred million mailboxes were behind it and something like three to four billion messages a day were passing through the filters.

Around 2002 and 2003 my inbox filled up with garbage the way everyone's did, in the years when a webmail address was the only thing that followed you between one machine and the next. At some point it mostly stopped, and no announcement was made about it. There was no version number on that change and no button anybody pressed. Most of the work was done by companies like this one, running inside mail systems whose users never had any relationship with them and never learned the name.

~ the rap sheet ~

~ the trap ~

The probe network worked because spam is a volume business and volume is a signature. A message sent to one person is a message. The same message sent to eight million people, several thousand of whom turn out to be mailboxes that have never sent an email in their lives, is a campaign with a fingerprint on it. Brightmail did not need to understand what the message said. It needed to notice that the message had landed somewhere it could only have landed by being blasted.

This is why the approach aged better than the alternatives being tried at the time. Keyword blocklists were an arms race the spammers won every week by misspelling things. Bayesian filters on the desktop were good but needed each user to train them. Brightmail moved the whole judgment upstream to the provider, where the traffic was visible in aggregate, and left the user with nothing to configure.

~ the exit ~

Brightmail filed its registration statement in march 2004 and was heading for an IPO. Symantec, which had put money in back in 2000 and owned eleven percent, made an offer instead. The board took it. The announcement came on 19 may 2004 and the deal closed on 21 june, valuing the six year old company at $370 million.

For Symantec this was a purchase of credibility as much as technology. It was in the middle of a run of acquisitions meant to turn an antivirus vendor into a general security company, and email was the channel almost every threat arrived through. The Powered by Brightmail line went onto the products and stayed there for years, which is unusual treatment for an acquired brand and a fair measure of what the name was worth in that market.

~ the inheritance ~

The name lasted until about 2011, when most of what carried it was folded into Symantec Messaging Gateway and the branding went away. Symantec's enterprise security business went to Broadcom in 2019, so the filtering engine that came out of a San Francisco startup is now several owners downstream of the company that bought it.

Spam did not end, which was the founding promise, but it did stop being the defining experience of having an email address. That change happened between roughly 2003 and 2008, carried out by infrastructure nobody outside the industry could name. It is one of the very few times the internet quietly fixed something and moved on without a single user noticing the date.

@}-->--

              )
             (_)
            .-'-.
            |   |
            |   |
            |   |
            |   |
          __|   |__   .-.
       .-'  |   |  `-:   :
      :     `---'     :-'
       `-._       _.-'
           '""""""

« previous  ·  random  ·  next »